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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims; 
Claims 1-5 (canceled). 

6. (currently amended) A service operating on a computer system to process requests from 
client processes, comprising: 

a primary service instance operating on the computer system, including means for 
receiving and processing client requests, from the client processes: and 

at least one backup service instance operating on the computer system, including means 
for receiving and processing the client requests, wherein each backup service instance is 
logically equivalent to the primary service instance: 

wherein the primary service instance includes means for determining which external 
requests, when processed by the secondary service instance, are logical requests such that 
processing of the determined logical requests cause the external view of each backup service 
instance to change: and means for communicating with each backup service instance to provide 
an indication of the determined logical requests to each backup service instance: and 

Th e s e rvic e of claim 1 , wherein each backup service instance includes means for 
communicating, to the primary service instance, acknowledgement of the determined logical 
requests. 

7. (original) The service of claim 6, wherein the primary service instance includes means for 
committing the determined logical requests in response to the acknowledgements of the 
determined logical requests. 

8. (original) The service of claim 7, wherein each backup service instance includes means for 
committing the results of processing the determined logical requests. 

9. (original) The service of claim 8, further comprising: order ensuring means for ensuring 
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that, for a sequence of determined logical requests, each backup service instance commits the 
results of processing the determined logical requests in the same order as the primary service 
instance commits the results. 

10. (original) The service of claim 9, wherein: the order ensuring means includes means for 
maintaining a table of determined logical requests; and each backup service instance includes 
means for processing the table of determined logical requests to determine an order of 
committing results of processing the determined logical requests. 

11. (original) The service of claim 10, wherein: the means for maintaining a table of determined 
logical requests includes means for associating sequence values with the determined logical 
requests; and the means for processing the table includes means for processing the sequence 
values. 

12. (currently amended) A service operating on a computer system to process requests from 
client processes, comprising: 

a primary service instance operating on the computer system, including means for 
receiving and processing client requests, from the client processes: and 

at least one backup service instance operating on the computer system, including means 
for receiving and processing the client requests, wherein each backup service instance is 
logically equivalent to the primary service instance; 

wherein the primary service instance includes means for determining which external 
requests, when processed by the secondary service instance, are logical requests such that 
processing of the determined logical requests cause the external view of each backup service 
instance to change; means for communicating with each backup service instance to provide an 
indication of the determined logical requests to each backup service instance: 

Th e s e rvic e of claim 1, wh e r e in: th e primary servic e instanc e includ e s means for 
receiving an indication of a path failure between the primary service instance and a client process 
that occurs after a result of processing a particular client request is committed and before the 
client process receives the result from the service; and th e primary servic e instanc e includ e s 
means for receiving the particular client request again and for providing the response to the client 

3 

EMV7 184489.1 
2502863-991190 



request without again processing the client request. 



U.S. Patent Application No. 09/997,877 
Attorney Docket No. 2502863-991 190 



13. (currently amended) A service operating on a computer system to process requests from 
client processes, comprising: 

a primary service instance operating on the computer system, including means for 
receiving and processing client requests, from the client processes; and 

at least one backup service instance operating on the computer system, including means 
for receiving and processing the client requests, wherein each backup service instance is 
logically equivalent to the primary service instance; 

wherein the primary service instance includes means for determining which external 
requests, when processed by the secondary service instance, are logical requests such that 
processing of the determined logical requests cause the external view of each backup service 
instance to change; means for communicating with each backup service instance to provide an 
indication of the determined logical requests to each backup service instance; and 

Th e s e rvic e of claim 1, furth e r comprising: wherein each backup service instance 
includes means for receiving an indication of a failure of the primary service instance , and^ and 
e ach backup s e rvic e instanc e includ e s means for notifying the client process that each backup 
service instance has become a new primary service instance; and the new primary service 
instance includes means for receiving client requests and, for client requests that have already 
been committed by the new primary service instance when the new primary service instance was 
a backup service instance, providing the committed response to the client request without again 
processing the request. 

14. (original) The service of claim 13, wherein: the new primary service instance includes 
means for receiving client requests and, for client requests that have already been received but 
not committed by the new primary service instance when the new primary service instance was a 
backup service instance, allowing the new primary service instance to continue processing the 
requests. 

15. (original) The service of claim 7, wherein: a sequence of associated client requests is a 
transaction; each backup service instance includes means for communicating a single 
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acknowledgement for the client requests of the transaction; and each backup service instance 
includes means for committing the results of processing the client requests of the transaction as a 
single commitment. 

16. (original) The service of claim 14, wherein: a sequence of associated client requests is a 
transaction; each backup service instance includes means for communicating an 
acknowledgement for each client request of the transaction; and each backup service instance 
includes means for committing the results of processing the client requests of the transaction as a 
single commitment. 

17. (original) The service of claim 16, wherein: the transaction committing means of each 
backup service instance includes means for receiving a commitment request from the primary 
service instance, wherein the transaction committing means commits the results of the 
transaction in response to the received commitment request. 

Claims 18-19 (canceled). 

20. (currently amended) A service operating on a computer system to process requests from 
client processes, comprising: 

a primary service instance operating on the computer system, including means for 
receiving and processing client requests, from the client processes; and 

at least one backup service instance operating on the computer system, including means 
for receiving and processing the client requests, wherein each backup service instance is 
logically equivalent to the primary service instance: 

wherein the primary service instance includes means for determining which external 
requests, when processed by the secondary service instance, are logical requests such that 
processing of the determined logical requests cause the external view of each backup service 
instance to change; means for communicating with each backup service instance to provide an 
indication of the determined logical requests to each backup service instance; 

means for creating an additional backup service instance, including means for replicating 
the logical view of the primary service instance to the additional backup service instance, 
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wherein the means for replicating the logical view of the primary service instance to the 
additional backup service instance provides the determined logical requests to the additional 
backup service instance; and 

Th e s e rvic e of claim 19, wh e r e in: th e r e plicating m e ans includes m e ans for proc e ssing 
processes a request history table to ensure that logical view of the additional backup service 
instance is the same as the logical view of the primary service instance. 

21. (original) The service of claim 20, wherein: the replicating means includes means for 
configuring the determining means to process client requests received while the request history 
table is being processed. 

22. (original) The service of claim 21, wherein the means for configuring the determining 
means to process client requests received while the request history table is being processed 
operates in response to a termination of the request history table being processed. 

23. (original) The service of claim 22, wherein the transitioning means includes means for 
configuring the primary service instance to temporarily stop accepting client requests. 

24. (currently amended) The service of claim 23, wherein the means for configuring the 
r e plac e m e nt primary service instance to temporarily stop accepting client requests operates in 
response to a comparison of the logical view of the primary service instance to the logical view 
of the additional backup service instance. 

Claims 25-28 (canceled). 

29. (currently amended) A service operating on a computer system to process requests from 
client processes, comprising: 

a primary service instance operating on the computer system, and being adapted to 
receive and process client requests from the client processes: 
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at least one backup service instance operating on the computer system, and being adapted 
to receive and process the client requests, wherein each backup service instance is logically 
equivalent to the primary service instance; 

wherein the primary service instance determines which external requests, when processed 
by the secondary service instance, are logical requests such that processing of the determined 
logical requests cause the external view of each backup service instance to change, and 
communicates with each backup service instance to provide an indication of the determined 
logical requests to each backup service instance; and 

a mechanism for creating and operating an additional backup service instance, including 
a replicating mechanism for replicating the logical view of the primary service instance to the 
additional backup service instance, and 

Th e s e rvic e of claim 26, wh e r e in: th e m e ans for r e plicating th e logical vi e w of th e 
primary s e rvic e instanc e to th e additional backup s e rvice instance includ e s means for providing 
the determined logical requests to the additional backup service instance. 

30. (currently amended) The service of claim 29, wherein: the replicating m e ans includ e s m e ans 
mechanism is further adapted to [for processing] process a request history table to ensure that 
logical view of the additional backup service instance is the same as the logical view of the 
primary service instance. 

31. (currently amended) A service operating on a computer system to process requests from 
client processes, comprising: 

a primary service instance operating on the computer system, and being adapted to 
receive and process client requests from the client processes; 

at least one backup service instance operating on the computer system, and being adapted 
to receive and process the client requests, wherein each backup service instance is logically 
equivalent to the primary service instance; 

wherein the primary service instance determines which external requests, when processed 
by the secondary service instance, are logical requests such that processing of the determined 
logical requests cause the external view of each backup service instance to change, and 
communicates with each backup service instance to provide an indication of the determined 
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logical requests to each backup service instance; and 

a mechanism for creating and operating an additional backup service instance, including 
a replicating mechanism for replicating the logical view of the primary service instance to the 
additional backup service instance, and 

Th e s e rvic e of claim 26, wh e r e in: th e m e ans for replicating th e logical vi e w of th e 
primary s e rvic e instanc e to th e additional backup s e rvic e instanc e includ e s moans for 
implementing the additional backup service instance to have a physical behavior different from 
the physical behavior of the primary service instance. 

32. (currently amended) The service of claim 31 further comprising: m e ans for a disabling 
mechanism for disabling the at least one backup service instance; m e ans a mechanism for 
enabling and operating the at least one backup service instance with an implementation that has 
the same physical behavior as the additional backup service instance; and m e ans for a replicating 
mechanism replicating the logical view of the primary service instance to the at least one backup 
service instance. 

33. (currently amended) The service of claim 32, furth e r comprising: m e an s a disabling 
mechanism for disabling the primary service instance; and m e ans a mechanism for causing at 
least one of the at least one backup service instance and the additional backup service instance to 
become a primary service instance. 

34. (currently amended) The service of claim 33, furth e r comprising: m e ans a mechanism for 
creating and operating a second additional backup service instance, including m e ans for a 
replicating mechanism for replicating the logical view of the primary service instance to the 
second additional backup service instance. 

35. (currently amended) A service operating on a computer system to process requests from 
client processes, comprising: 

a primary service instance operating on the computer system, and being adapted to 
receive and process client requests from the client processes: 
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at least one backup service instance operating on the computer system, and being adapted 
to receive and process the client requests, wherein each backup service instance is logically 
equivalent to the primary service instance; 

wherein the primary service instance determines which external requests, when processed 
by the secondary service instance, are logical requests such that processing of the determined 
logical requests cause the external view of each backup service instance to change, and 
communicates with each backup service instance to provide an indication of the determined 
logical requests to each backup service instance; and 

a mechanism for creating and operating an additional backup service instance, including 
a replicating mechanism for replicating the logical view of the primary service instance to the 
additional backup service instance, and 

Th e s e rvic e of claim 26, wh e r e in: th e m e ans for r e plicating th e logical vi e w of th e 
primary s e rvic e instanc e to th e additional backup s e rvic e instanc e includ e s m e ans for 
implementing the additional backup service instance to have a physical behavior the same as the 
physical behavior of the primary service instance. 

36. (currently amended) The service of claim 35, further comprising: m e ans for a disabling 
mechanism for disabling the at least one backup service instance; m e ans for a mechanism for 
enabling and operating the at least one backup service instance with an implementation that has 
the same physical behavior as the additional backup service instance; and m e ans for a replicating 
mechanism for replicating the logical view of the primary service instance to the at least one 
backup service instance. 

37. (currently amended) The service of claim 36, further comprising: m e ans for a disabling 
mechanism for disabling the primary service instance; and m e ans a mechanism for causing at 
least one of the at least one backup service instance and the additional backup service instance to 
become a primary service instance. 

38. (currently amended) The service of claim 37, further comprising: m e ans for a mechanism 
for creating and operating a second additional backup service instance, including m e ans a 
replicating mechanism for replicating the logical view of the primary service instance to the 

9 

EM\7 184489.1 
2502863-991190 



U.S. Patent Application No. 09/997,877 
Attorney Docket No. 2502863-991 190 



second additional backup service instance. 
Claims 39-43 (canceled). 

44. (currently amended) A method of operating a computer system to process requests from 
client processes, comprising: 

operating a primary service instance on the computer system, including receiving and 
processing client requests, from the client processes; and 

operating at least one backup service instance on the computer system, including 
receiving and processing the client requests, wherein each backup service instance is logically 
equivalent to the primary service instance; 

wherein the step of operating the primary service instance includes determining which 
external requests, when processed by the secondary service instance, are logical requests such 
that processing of the determined logical requests cause the external view of each backup service 
instance to change, and communicating with each backup service instance to provide an 
indication of the determined logical requests to each backup service instance; and 

Th e m e thod of claim 39, wherein the step of operating each backup service instance 
includes communicating, to the primary service instance, acknowledgement of the determined 
logical requests. 

45. (currently amended) A method of operating a computer system to process requests from 
client processes, comprising: 

operating a primary service instance on the computer system, including receiving and 
processing client requests, from the client processes; and 

operating at least one backup service instance on the computer system, including 
receiving and processing the client requests, wherein each backup service instance is logically 
equivalent to the primary service instance; 

wherein the step of operating the primary service instance includes determining which 
external requests, when processed by the secondary service instance, are logical requests such 
that processing of the determined logical requests cause the external view of each backup service 
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instance to change, and communicating with each backup service instance to provide an 
indication of the determined logical requests to each backup service instance, and 

Th e m e thod of claim 39, wh e r e in th e st e p of op e rating th e primary servic e instance 
includ e s committing the determined logical requests in response to the acknowledgements of the 
determined logical requests. 

46. (original) The method of claim 45, wherein the step of operating each backup service 
instance includes committing the results of processing the determined logical requests. 

47. (original) The method of claim 46, further comprising: ensuring that, for a sequence of 
determined logical requests, each backup service instance commits the results of processing the 
determined logical requests in the same order as the primary service instance commits the 
results. 

48. (currently amended) The method of claim 47, wherein: step the order ensuring step 
includes maintaining a table of determined logical requests; and the step of operating each 
backup service instance includes processing the table of determined logical requests to determine 
an order of committing results of processing the determined logical requests. 

49. (original) The method of claim 48, wherein: the step of maintaining a table of determined 
logical requests includes associating sequence values with the determined logical requests; and 
the step of processing the table includes processing the sequence values. 

50. (currently amended) A method of operating a computer system to process requests from 
client processes, comprising: 

operating a primary service instance on the computer system, including receiving and 
processing client requests, from the client processes: and 

operating at least one backup service instance on the computer system, including 
receiving and processing the client requests, wherein each backup service instance is logically 
equivalent to the primary service instance: 
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wherein the step of operating the primary service instance includes determining which 
external requests, when processed by the secondary service instance, are logical requests such 
that processing of the determined logical requests cause the external view of each backup service 
instance to change, and communicating with each backup service instance to provide an 
indication of the determined logical requests to each backup service instance; and 

Th e m e thod of claim 39, wherein: the step of operating the primary service instance 
includes receiving an indication of a path failure between the primary service instance and a 
client process that occurs after a result of processing a particular client request is committed and 
before the client process receives the result from the service^ and th e st e p of operating th e 
primary s e rvic e instanc e includ e s receiving the particular client request again and providing the 
response to the client request without again processing the client request. 

51. (currently amended) A method of operating a computer system to process requests from 
client processes, comprising: 

operating a primary service instance on the computer system, including receiving and 
processing client requests, from the client processes: and 

operating at least one backup service instance on the computer system, including 
receiving and processing the client requests, wherein each backup service instance is logically 
equivalent to the primary service instance; 

wherein the step of operating the primary service instance includes determining which 
external requests, when processed by the secondary service instance, are logical requests such 
that processing of the determined logical requests cause the external view of each backup service 
instance to change, and communicating with each backup service instance to provide an 
indication of the determined logical requests to each backup service instance; and 

Th e m e thod of claim 39, furth e r comprising: th e st e p of wherein: operating each backup 
service instance includes receiving an indication of a failure of the primary service instance , and i 
and th e st e p of op e rating e ach backup s e rvic e instanc e includ e s notifying the client process that 
each backup service instance has become a new primary service instance; and th e st e p of 
operating the new primary service instance includes receiving client requests and, for client 
requests that have already been committed by the new primary service instance when the new 
primary service instance was a backup service instance, providing the committed response to the 
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client request without again processing the request. 

52. (original) The method of claim 51, wherein: the step of operating the new primary service 
instance includes receiving client requests and, for client requests that have already been 
received but not committed by the new primary service instance when the new primary service 
instance was a backup service instance, allowing the new primary service instance to continue 
processing the requests. 

53. (currently amended) The method of claim 45, wherein: a sequence of associated client 
requests is a transaction; the step of operating each backup service instance includes 
communicating a single acknowledgement for the client requests of the transaction^ and th e st e p 
of op e rating e ach backup s e rvic e instanc e includ e s committing the results of processing the 
client requests of the transaction as a single commitment. 

54. (currently amended) The method of claim 52, wherein: a sequence of associated client 
requests is a transaction; the step of operating each backup service instance includes 
communicating an acknowledgement for each client request of the transaction^ and th e st e p of 
op e rating e ach backup s e rvic e instanc e includ e s committing the results of processing the client 
requests of the transaction as a single commitment. 

55. (currently amended) The method of claim 59 54, wherein: th e st e p of committing the 
results of processing the client requests of a transaction for each backup service instance includes 
receiving a commitment request from the primary service instance, wh e r e in th e transaction 
committing st e p includ e s and committing the results of the transaction in response to the 
received commitment request. 

Claims 56-57 (canceled). 

58. (currently amended) A method of operating a computer system to process requests from 
client processes, comprising: 
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operating a primary service instance on the computer system, including receiving and 
processing client requests, from the client processes; 

operating at least one backup service instance on the computer system, including 
receiving and processing the client requests, wherein each backup service instance is logically 
equivalent to the primary service instance; 

wherein the step of operating the primary service instance includes determining which 
external requests, when processed by the secondary service instance, are logical requests such 
that processing of the determined logical requests cause the external view of each backup service 
instance to change; and communicating with each backup service instance to provide an 
indication of the determined logical requests to each backup service instance; and 

creating an additional backup service instance, including replicating the logical view of 
the primary service instance to the additional backup service instance; 

wherein the step of replicating the logical view of the primary service instance to the 
additional backup service instance includes providing the determined logical requests to the 
additional backup service instance, and 

Th e m e thod of claim 57, wh e r e in: th e st e p of r e plicating th e logical vi e w of th e primary 
s e rvic e instance includ e s processing a request history table to ensure that logical view of the 
additional backup service instance is the same as the logical view of the primary service instance. 

59. (original) The method of claim 58, wherein: the step of replicating the logical view of the 
primary service instance includes configuring the determining step to process client requests 
received while the request history table is being processed. 

60. (original) The method of claim 59, wherein the step of configuring the determining step to 
process client requests received while the request history table is being processed is performed in 
response to a termination of the request history table being processed. 

61. (original) The method of claim 60, wherein the transitioning step includes configuring the 
replacement primary service instance to temporarily stop accepting client requests. 

62. (original) The method of claim 61, wherein the step of configuring the replacement primary 
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service instance to temporarily stop accepting client requests is performed in response to a 
comparison of the logical view of the primary service instance to the logical view of the 
additional backup service instance. 

Claims 63-66 (canceled). 

67. (currently amended) A method of operating a service on a computer system to process 
requests from client processes, comprising: 

operating a primary service instance on the computer system, including receiving and 
processing client requests from the client processes; 

operating at least one backup service instance on the computer system, including 
receiving and processing the client requests, wherein each backup service instance is logically 
equivalent to the primary service instance; 

wherein the step of operating the primary service instance includes determining which 
external requests, when processed by the secondary service instance, are logical requests such 
that processing of the determined logical requests cause the external view of each backup service 
instance to change, and communicating with each backup service instance to provide an 
indication of the determined logical requests to each backup service instance; and 

creating and operating an additional backup service instance, including replicating the 
logical view of the primary service instance to the additional backup service instance; 

Th e m e thod of claim 6 4 , wherein: the step of replicating the logical view of the primary 
service instance to the additional backup service instance includes providing the determined 
logical requests to the additional backup service instance. 

68. (currently amended) A method of operating a service on a computer system to process 
requests from client processes, comprising: 

operating a primary service instance on the computer system, including receiving and 
processing client requests from the client processes; 

operating at least one backup service instance on the computer system, including 
receiving and processing the client requests, wherein each backup service instance is logically 
equivalent to the primary service instance; 
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wherein the step of operating the primary service instance includes determining which 
external requests, when processed by the secondary service instance, are logical requests such 
that processing of the determined logical requests cause the external view of each backup service 
instance to change, and communicating with each backup service instance to provide an 
indication of the determined logical requests to each backup service instance; and 

creating and operating an additional backup service instance, including replicating the 
logical view of the primary service instance to the additional backup service instance; 

The m e thod of claim 6 4 , wherein: the replicating step includes processing a request 
history table to ensure that logical view of the additional backup service instance is the same as 
the logical view of the primary service instance. 

69. (currently amended) A method of operating a service on a computer system to process 
requests from client processes, comprising: 

operating a primary service instance on the computer system, including receiving and 
processing client requests from the client processes; 

operating at least one backup service instance on the computer system, including 
receiving and processing the client requests, wherein each backup service instance is logically 
equivalent to the primary service instance; 

wherein the step of operating the primary service instance includes determining which 
external requests, when processed by the secondary service instance, are logical requests such 
that processing of the determined logical requests cause the external view of each backup service 
instance to change, and communicating with each backup service instance to provide an 
indication of the determined logical requests to each backup service instance; and 

creating and operating an additional backup service instance, including replicating the 
logical view of the primary service instance to the additional backup service instance; 

Th e m e thod of claim 6 4 , wherein: the step of replicating the logical view of the primary 
service instance to the additional backup service instance includes implementing the additional 
backup service instance to have a physical behavior different from the physical behavior of the 
primary service instance. 

70. (original) The method of claim 69, further comprising: disabling the at least one backup 
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service instance; enabling and operating the at least one backup service instance with an 

i 

implementation that has the same physical behavior as the additional backup service instance; 
and replicating the logical view of the primary service instance to the at least one backup service 
instance. 

71. (original) The method of claim 70, further comprising: disabling the primary service 
instance; and causing at least one of the at least one backup service instance and the additional 
backup service instance to become a primary service instance. 

72. (original) The method of claim 71, further comprising: creating and operating a second 
additional backup service instance, including replicating the logical view of the primary service 
instance to the second additional backup service instance. 

73. (currently amended) A method of operating a service on a computer system to process 
requests from client processes, comprising: 

operating a primary service instance on the computer system, including receiving and 
processing client requests from the client processes; 

operating at least one backup service instance on the computer system, including 
receiving and processing the client requests, wherein each backup service instance is logically 
equivalent to the primary service instance; 

wherein the step of operating the primary service instance includes determining which 
external requests, when processed by the secondary service instance, are logical requests such 
that processing of the determined logical requests cause the external view of each backup service 
instance to change, and communicating with each backup service instance to provide an 
indication of the determined logical requests to each backup service instance; and 

creating and operating an additional backup service instance, including replicating the 
logical view of the primary service instance to the additional backup service instance; 

Th e m e thod of claim 6 4 , wherein: the step of replicating the logical view of the primary 
service instance to the additional backup service instance includes implementing the additional 
backup service instance to have a physical behavior the same as the physical behavior of the 
primary service instance. 
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74. (original) The method of claim 73, further comprising: disabling the at least one backup 
service instance; enabling and operating the at least one backup service instance with an 
implementation that has the same physical behavior as the additional backup service instance; 
and replicating the logical view of the primary service instance to the at least one backup service 
instance. 

75. (original) The method of claim 74, further comprising: disabling the primary service 
instance; and causing at least one of the at least one backup service instance and the additional 
backup service instance to become a primary service instance. 

76. (original) The method of claim 75, further comprising: creating and operating a second 
additional backup service instance, including replicating the logical view of the primary service 
instance to the second additional backup service instance. 

Claims 77-81 (canceled) 

82. (currently amended) A program storage device readable by a machine tangibly embodying a 
program of instructions executable by the machine to perform method steps for operating a 
computer system to process requests from client processes, said method steps comprising: 

operating a primary service instance on the computer system, including receiving and 
processing client requests, from the client processes: and 

operating at least one backup service instance on the computer system, including 
receiving and processing the client requests, wherein each backup service instance is logically 
equivalent to the primary service instance; 

wherein the step of operating the primary service instance includes determining which 
external requests, when processed by the secondary service instance, are logical requests such 
that processing of the determined logical requests cause the external view of each backup service 
instance to change, and communicating with each backup service instance to provide an 
indication of the determined logical requests to each backup service instance; and 

Th e program storag e d e vic e of claim 77, wherein the step of operating each backup 
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service instance includes communicating, to the primary service instance, acknowledgement of 
the determined logical requests. 

83. (original) The program storage device of claim 82, wherein the step of operating the 
primary service instance includes committing the determined logical requests in response to the 
acknowledgements of the determined logical requests. 

84. (original) The program storage device of claim 83, wherein the step of operating each 
backup service instance includes committing the results of processing the determined logical 
requests. 

85. (original) The program storage device of claim 84, further comprising: ensuring that, for a 
sequence of determined logical requests, each backup service instance commits the results of 
processing the determined logical requests in the same order as the primary service instance 
commits the results. 

86. (original) The program storage device of claim 85, wherein: step order ensuring step 
includes maintaining a table of determined logical requests; and the step of operating each 
backup service instance includes processing the table of determined logical requests to determine 
an order of committing results of processing the determined logical requests. 

87. (original) The program storage device of claim 86, wherein: the step of maintaining a table 
of determined logical requests includes associating sequence values with the determined logical 
requests; and the step of processing the table includes processing the sequence values. 

88. (currently amended) A program storage device readable by a machine tangibly embodying a 
program of instructions executable by the machine to perform method steps for operating a 
computer system to process requests from client processes, said method steps comprising: 

operating a primary service instance on the computer system, including receiving and 
processing client requests, from the client processes; and 
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operating at least one backup service instance on the computer system, including 
receiving and processing the client requests, wherein each backup service instance is logically 
equivalent to the primary service instance; 

wherein the step of operating the primary service instance includes determining which 
external requests, when processed by the secondary service instance, are logical requests such 
that processing of the determined logical requests cause the external view of each backup service 
instance to change, communicating with each backup service instance to provide an indication of 
the determined logical requests to each backup service instance. 

Th e program storag e d e vic e of claim 77, wh e r e in: th e step of operating the primary 
s e rvic e instanc e includ e s receiving an indication of a path failure between the primary service 
instance and a client process that occurs after a result of processing a particular client request is 
committed and before the client process receives the result from the service^ and th e st e p of 
op e rating th e primary servic e instanc e includ e s receiving the particular client request again and 
providing the response to the client request without again processing the client request. 

89. (currently amended) A program storage device readable by a machine tangibly embodying a 
program of instructions executable by the machine to perform method steps for operating a 
computer system to process requests from client processes, said method steps comprising: 

operating a primary service instance on the computer system, including receiving and 
processing client requests, from the client processes: and 

operating at least one backup service instance on the computer system, including 
receiving and processing the client requests, wherein each backup service instance is logically 
equivalent to the primary service instance: 

wherein the step of operating the primary service instance includes determining which 
external requests, when processed by the secondary service instance, are logical requests such 
that processing of the determined logical requests cause the external view of each backup service 
instance to change, and communicating with each backup service instance to provide an 
indication of the determined logical requests to each backup service instance: 

Th e program storag e d e vic e of claim 77, furth e r comprising: wherein the step of 
operating each backup service instance includes receiving an indication of a failure of the 
primary service instance^ and th e step of op e rating e ach backup service instanc e includ e s 
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notifying the client process that each backup service instance has become a new primary service 
instance; and wherein the step of operating the new primary service instance includes receiving 
client requests and, for client requests that have already been committed by the new primary 
service instance when the new primary service instance was a backup service instance, providing 
the committed response to the client request without again processing the request. 

90. (original) The program storage device of claim 89, wherein: the step of operating the new 
primary service instance includes receiving client requests and, for client requests that have 
already been received but not committed by the new primary service instance when the new 
primary service instance was a backup service instance, allowing the new primary service 
instance to continue processing the requests. 

91. (original) The program storage device of claim 83, wherein: a sequence of associated client 
requests is a transaction; the step of operating each backup service instance includes 
communicating a single acknowledgement for the client requests of the transaction; and the step 
of operating each backup service instance includes committing the results of processing the 
client requests of the transaction as a single commitment. 

92. (original) The program storage device of claim 89, wherein: a sequence of associated client 
requests is a transaction; the step of operating each backup service instance includes 
communicating an acknowledgement for each client request of the transaction; and the step of 
operating each backup service instance includes committing the results of processing the client 
requests of the transaction as a single commitment. 

93. (original) The program storage device of claim 92, wherein: the step of committing a 
transaction for each backup service instance includes receiving a commitment request from the 
primary service instance, wherein the transaction committing step includes committing the 
results of the transaction in response to the received commitment request. 

Claims 94-95 (canceled). 
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96. (currently amended) A program storage device readable by a machine tangibly embodying 
a program of instructions executable by the machine to perform method steps for operating a 
computer system to process requests from client processes, said method steps comprising: 

operating a primary service instance on the computer system, including receiving and 
processing client requests, from the client processes; and 

operating at least one backup service instance on the computer system, including 
receiving and processing the client requests, wherein each backup service instance is logically 
equivalent to the primary service instance; 

wherein the step of operating the primary service instance includes determining which 
external requests, when processed by the secondary service instance, are logical requests such 
that processing of the determined logical requests cause the external view of each backup service 
instance to change, and communicating with each backup service instance to provide an 
indication of the determined logical requests to each backup service instance; and 

creating an additional backup service instance, including replicating the logical view of 
the primary service instance to the additional backup service instance; 

wherein the step of replicating the logical view of the primary service instance to the 
additional backup service instance includes providing the determined logical requests to the 
additional backup service instance, and 

Th e program storag e d e vic e of claim 95, wh e r e in: th e st e p of r e plicating th e logical vi e w 
of th e primary s e rvic e instanc e includ e s processing a request history table to ensure that logical 
view of the additional backup service instance is the same as the logical view of the primary 
service instance. 

97. (original) The program storage device of claim 96, wherein: the step of replicating the 
logical view of the primary service instance includes configuring the determining step to process 
client requests received while the request history table is being processed. 

98. (original) The program storage device of claim 97, wherein the step of configuring the 
determining step to process client requests received while the request history table is being 
processed is performed in response to a termination of the request history table being processed. 
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99. (original) The program storage device of claim 98, wherein the transitioning step includes 
configuring the replacement primary service instance to temporarily stop accepting client 
requests. 

100. (original) The program storage device of claim 99, wherein the step of configuring the 
replacement primary service instance to temporarily stop accepting client requests is performed 
in response to a comparison of the logical view of the primary service instance to the logical 
view of the additional backup service instance. 

Claims 101-104 (canceled). 

105. (currently amended) A program storage device readable by a machine tangibly embodying 
a program of instructions executable by the machine to perform method steps for operating a 
computer system to process requests from client processes, said method steps comprising: 

operating a primary service instance on the computer system, including receiving and 
processing client requests from the client processes; 

operating at least one backup service instance on the computer system, including 
receiving and processing the client requests, wherein each backup service instance is logically 
equivalent to the primary service instance; 

wherein the step of operating the primary service instance includes determining which 
external requests, when processed by the secondary service instance, are logical requests such 
that processing of the determined logical requests cause the external view of each backup service 
instance to change, and communicating with each backup service instance to provide an 
indication of the determined logical requests to each backup service instance; and 

creating and operating an additional backup service instance, including replicating the 
logical view of the primary service instance to the additional backup service instance ; 

Th e program storag e d e vic e of claim 102, wherein: the step of replicating the logical 
view of the primary service instance to the additional backup service instance includes providing 
the determined logical requests to the additional backup service instance. 
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106. (original) The program storage device of claim 105, wherein: the replicating step includes 
processing a request history table to ensure that logical view of the additional backup service 
instance is the same as the logical view of the primary service instance. 

107. (currently amended) A program storage device readable by a machine tangibly 
embodying a program of instructions executable by the machine to perform method steps for 
operating a computer system to process requests from client processes, said method steps 
comprising: 

operating a primary service instance on the computer system, including receiving and 
processing client requests from the client processes: 

operating at least one backup service instance on the computer system, including 
receiving and processing the client requests, wherein each backup service instance is logically 
equivalent to the primary service instance; 

wherein the step of operating the primary service instance includes determining which 
external requests, when processed by the secondary service instance, are logical requests such 
that processing of the determined logical requests cause the external view of each backup service 
instance to change, and communicating with each backup service instance to provide an 
indication of the determined logical requests to each backup service instance: and 

creating and operating an additional backup service instance, including replicating the 
logical view of the primary service instance to the additional backup service instance ; 

Th e program storag e d e vic e of claim 102, wherein: the step of replicating the logical 
view of the primary service instance to the additional backup service instance includes 
implementing the additional backup service instance to have a physical behavior different from 
the physical behavior of the primary service instance. 

108. (original) The program storage device of claim 107, further comprising: disabling 
the at least one backup service instance; enabling and operating the at least one backup service 
instance with an implementation that has the same physical behavior as the additional backup 
service instance; and replicating the logical view of the primary service instance to the at least 
one backup service instance. 
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109. (original) The program storage device of claim 108, further comprising: disabling 
the primary service instance; and causing at least one of the at least one backup service instance 
and the additional backup service instance to become a primary service instance. 

110. (original) The program storage device of claim 109, further comprising: creating and 
operating a second additional backup service instance, including replicating the logical view of 
the primary service instance to the second additional backup service instance. 

111. (currently amended) A program storage device readable by a machine tangibly 
embodying a program of instructions executable by the machine to perform method steps for 
operating a computer system to process requests from client processes, said method steps 
comprising: 

operating a primary service instance on the computer system, including receiving and 
processing client requests from the client processes: 

operating at least one backup service instance on the computer system, including 
receiving and processing the client requests, wherein each backup service instance is logically 
equivalent to the primary service instance: 

wherein the step of operating the primary service instance includes determining which 
external requests, when processed by the secondary service instance, are logical requests such 
that processing of the determined logical requests cause the external view of each backup service 
instance to change, and communicating with each backup service instance to provide an 
indication of the determined logical requests to each backup service instance: and 

creating and operating an additional backup service instance, including replicating the 
logical view of the primary service instance to the additional backup service instance : 

Th e program storag e d e vic e of claim 102, wherein: the step of replicating the logical 
view of the primary service instance to the additional backup service instance includes 
implementing the additional backup service instance to have a physical behavior the same as the 
physical behavior of the primary service instance. 

1 12. (original) The program storage device of claim 111, further comprising: disabling 
the at least one backup service instance; enabling and operating the at least one backup service 
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instance with an implementation that has the same physical behavior as the additional backup 
service instance; and replicating the logical view of the primary service instance to the at least 
one backup service instance. 

113. (original) The program storage device of claim 112, further comprising: disabling 
the primary service instance; and causing at least one of the at least one backup service instance 
and the additional backup service instance to become a primary service instance. 

114. (original) The program storage device of claim 113, further comprising: creating and 
operating a second additional backup service instance, including replicating the logical view of 
the primary service instance to the second additional backup service instance. 
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